How to restrict applications using Group Policies

The following procedure shows how to restrict an application from running using Software Restriction Policies. More details about Software Restriction Policies and the available options can be found here. 

This example shows how to restrict the windows notepad application from executing:

1. Start the local group policy editor by typing gpedit.msc in the Start search text box
2. Go to Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies node
3. Expand the Software Restriction Policies node and select Additional Rules
4. On the right hand side pane, right click and select New Path Rule…
5. Click the Browse button to search for Notepad.exe, select it and set the Security level to Disallowed
6. Click OK
    
7. Run notepad.exe – you should get a message stating that the program is blocked by group policy as shown below:

It’s that simple, the notepad application is disallowed to run. Now, we create a more specific rule that overrides the Path Rule.

1. On the right hand side pane, right click and select New Hash Rule…
2. Click the Browse button to search for Notepad.exe, select it and set the Security level to Unrestricted
3. Click OK
    
4. Run notepad.exe – Now, the application should run successfully
5. On the right hand side pane, right click each newly created policy and click Delete to remove these settings and return your computer to its previous state.